RErecordedfuture
Common

Preview Playbook Alert

Returns a Playbook Alert representation containing only properties shared between all alert types.

get/common/{playbook_alert_id}

Request

  • Base URL
    https://api.recordedfuture.com/playbook-alert
  • URL
    https://api.recordedfuture.com/playbook-alert/common/{playbook_alert_id}
  • Auth
    • API key in header X-RFToken
    • or OAuth 2
      Authorization code: https://id.recordedfuture.com/authorize
      Token URL: https://id.recordedfuture.com/token

Path parameters

playbook_alert_idstring required

The unique id of a specific Playbook Alert

Response

Data of the fetched alert.

Example response

{
  "status": {
    "status_code": "Ok",
    "status_message": "Ok"
  },
  "data": {
    "status": "Resolved",
    "created": "2023-07-21T17:32:28Z",
    "updated": "2023-07-21T17:32:28Z",
    "title": "mail.google.mail.pl",
    "assignee_name": "Marty McFly",
    "assignee_id": "uhash:40wXmPVONA",
    "owner_id": "uhash:3HX3rIn4Kv",
    "owner_name": "Recorded Future",
    "organisation_id": "uhash:3HX3rIn4Kv",
    "organisation_name": "Recorded Future",
    "owner_organisation_details": {
      "organisations": [
        {
          "organisation_id": "uhash:3HX3rIn4Kv",
          "organisation_name": "Recorded Future"
        }
      ],
      "enterprise_id": "uhash:1HX2qIn4Zy",
      "enterprise_name": "Recorded Future"
    },
    "actions_taken": [
      "cyber_vulnerability.patched",
      "brand_mentions_on_code_repository.keys_rotated",
      "domain_abuse.takedown",
      "malicious_sites.takedown",
      "third_party_risk.vendor_mitigated_findings",
      "identity_novel_exposures.enforced_password_reset"
    ]
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.